what about naming it ```permissionsService``` ? when u use it now in controller it's not obvious that it's something else than this ```permissions``` which is a list